AI Slop Code Risk Monitor

mthcht/awesome-lists

SlopCodeMonitor badge for mthcht/awesome-lists Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Awesome Security lists for SOC/CERT/CTI

0.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for mthcht/awesome-lists, a YARA project with 1,955 GitHub stars. SynthScan examined 690,546 lines of code across 12232 source files, recording 110 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 0.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.3
Adjusted Signal
0.3
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
2.0K
Stars
YARA
Language
690.5K
Lines of Code
12.2K
Files
110
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 49 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 9 finding(s).

Agent Over-Engineering Ratio 0.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 65 finding(s).

PR Review Velocity Impact 1.5/100 · LOW

Which changes need focused human review? 110 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 4MEDIUM 37LOW 69

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 110 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators20 hits · 63 pts
SeverityFileLineSnippetContext
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py61# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py63# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py88# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py90# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py139# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py141# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py225# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py227# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py300# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py302# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py368# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/VSCODE Extensions/build_vscode_extensions_feed.py370# ---------------------------------------------------------------------------COMMENT
MEDIUMLists/TOR/build_tor_history.py192 # ── Load state ───────────────────────────────────────────────────COMMENT
MEDIUMLists/TOR/build_tor_history.py205 # ── Load existing data (if any) ──────────────────────────────────COMMENT
MEDIUMLists/TOR/build_tor_history.py214 # ── Get commits ──────────────────────────────────────────────────COMMENT
MEDIUMLists/TOR/build_tor_history.py234 # ── Process ──────────────────────────────────────────────────────COMMENT
MEDIUM⚡Lists/TOR/build_tor_history.py265 # ── Merge periods ────────────────────────────────────────────────COMMENT
MEDIUM⚡Lists/TOR/build_tor_history.py270 # ── Compute stats for the data feed ──────────────────────────────COMMENT
MEDIUMLists/TOR/build_tor_history.py290 # ── Write clean data feed (no script state) ──────────────────────COMMENT
MEDIUMLists/TOR/build_tor_history.py305 # ── Write state separately ───────────────────────────────────────COMMENT
Self-Referential Comments12 hits · 34 pts
SeverityFileLineSnippetContext
MEDIUMLists/RMM/update_RMM_detection.py43# Create a DataFrame from the filtered rowsCOMMENT
MEDIUMLists/RMM/update_RMM_detection.py60 # Create a directory for the toolCOMMENT
MEDIUMLists/RMM/update_RMM_detection.py63 # Create a DataFrame for the toolCOMMENT
MEDIUMLists/TOR/Get_TOR_IOCs.py101 # Define a unique key based on IP and port, or just IP if there's no portSTRING
MEDIUMLists/Phishing/redflag_domains/fetch_redflagdomains.py4# Define the source URL and output filenameCOMMENT
MEDIUM…hing/phishing_army/fetch_phishing_army_domains_list.py5# Define the source URL and output filenameCOMMENT
MEDIUMLists/Phishing/phishing-db/fetch_phishing_domains.py5# Define the source URL and output filenameCOMMENT
MEDIUM.github/workflows/Proxy list update monosans.yml18 # Define the target directoryCOMMENT
MEDIUM.github/workflows/Proxy list update TheSpeedX.yml18 # Define the target directoryCOMMENT
MEDIUM.github/workflows/Proxy list update hideip.me.yml18 # Define the target directoryCOMMENT
MEDIUM…s/Proxy list update maximilianfeix free-proxy-list.yml18 # Define the target directoryCOMMENT
MEDIUM…rkflows/Proxy list update proxmint free-proxy-list.yml18 # Define the target directoryCOMMENT
Excessive Try-Catch Wrapping28 hits · 34 pts
SeverityFileLineSnippetContext
MEDIUM…lation_maxmind_geo_db/fetch_maxmind_databases_daily.py53 print(f"Error: No extracted folder found for {db_name}")CODE
LOW…ains/sinkholed_servers/search_for_sinkholed_servers.py25 except Exception as e:CODE
LOW…ains/sinkholed_servers/search_for_sinkholed_servers.py32 except Exception as e:CODE
LOW…sts/Domains/sinkholed_servers/transform_csv_to_json.py30 except Exception as e:CODE
LOWLists/Domains/DNSDB/TOP1M_DNSDB.py231 except Exception:STRING
LOWLists/Domains/C2IntelFeed/fetch_feeds.py347 except Exception as e:CODE
LOWLists/Drivers/get_loldriver_list.py28 except Exception as e:CODE
MEDIUMLists/Drivers/get_loldriver_list.py4def fetch_csv(url, output_file):CODE
LOWLists/Drivers/get_microsoft_vulnerable_drivers_list.py212 except Exception as e:CODE
MEDIUMLists/PROXY/sunny9577_proxy-scraper/fetch_proxies.py42 print(f"Error processing {proxy_file}: {e}")CODE
LOWLists/PROXY/proxyscrape.com/fetch_proxy_list.py75 except Exception as e:CODE
MEDIUMLists/PROXY/proxyscrape.com/fetch_proxy_list.py15def download_proxy_list():CODE
LOW…VPN/SurfSharkVPN/fetch_surfshark_servers_ip_address.py84 except Exception as e:CODE
LOW…VPN/SurfSharkVPN/fetch_surfshark_servers_ip_address.py95 except Exception as e:CODE
MEDIUM…VPN/SurfSharkVPN/fetch_surfshark_servers_ip_address.py20def download_zip(url, zip_path):CODE
LOW⚡Lists/Others/splunk/splunk_vuln_check.py168 except Exception:CODE
LOWLists/Others/splunk/splunk_vuln_check.py587 except Exception as e:CODE
LOWLists/Others/splunk/splunk_vuln_check.py599 except Exception as e:CODE
LOWLists/Others/splunk/splunk_vuln_check.py765 except Exception as e:CODE
LOWLists/VSCODE Extensions/build_vscode_extensions_feed.py438 except Exception as exc:CODE
LOWLists/TOR/build_tor_history.py108 except Exception:CODE
LOW⚡Lists/TOR/build_tor_history.py261 except Exception as e:CODE
LOWLists/TLDs/fetch_valid_tlds.py143 except Exception as e:CODE
LOWLists/Phishing/DNSTWIST/get_dnstwist.py23 except Exception as e:CODE
LOWLists/Phishing/DNSTWIST/get_dnstwist.py38 except Exception as e:CODE
LOWLists/Phishing/DNSTWIST/get_dnstwist.py52 except Exception as e:CODE
LOWLists/Phishing/DNSTWIST/get_dnstwist.py91 except Exception as e:CODE
LOWLists/IP/Threatfox/fetch_threatfox_ip_port.py48except Exception as e:CODE
Deep Nesting20 hits · 20 pts
SeverityFileLineSnippetContext
LOW_utils/create_bookmarks_file_to_import.py21CODE
LOW…ains/sinkholed_servers/search_for_sinkholed_servers.py12CODE
LOW…ains/sinkholed_servers/search_for_sinkholed_servers.py35CODE
LOWLists/Domains/DNSDB/TOP1M_DNSDB.py103CODE
LOWLists/Drivers/get_loldriver_list.py14CODE
LOWLists/PROXY/sunny9577_proxy-scraper/fetch_proxies.py19CODE
LOWLists/PROXY/openproxylist.xyz/fetch_proxy_list.py4CODE
LOWLists/PROXY/TheSpeedX_Proxy/create_lookup_file.py5CODE
LOWLists/PROXY/hideip.me/create_lookup_file.py5CODE
LOW…ddress_Company_List/Zscaler/fetch_zscaler_ip_ranges.py29CODE
LOW…st/Microsoft/Get_Microsoft_IP_Ranges_From_Microsoft.py77CODE
LOW…st/Microsoft/Get_Microsoft_IP_Ranges_From_Microsoft.py93CODE
LOW…ges_IP_Address_Company_List/bgp.he.net/get_ip_range.py14CODE
LOWLists/VPN/create_all_vpn_ip_list.py4CODE
LOW…VPN/SurfSharkVPN/fetch_surfshark_servers_ip_address.py73CODE
LOWLists/Others/splunk/splunk_vuln_check.py159CODE
LOWLists/Others/splunk/splunk_vuln_check.py309CODE
LOWLists/Others/splunk/splunk_vuln_check.py456CODE
LOWLists/Others/splunk/splunk_vuln_check.py567CODE
LOWLists/TOR/build_tor_history.py183CODE
Empty Error Handlers4 hits · 20 pts
SeverityFileLineSnippetContext
HIGHLists/Domains/DNSDB/TOP1M_DNSDB.py231except Exception:CODE
HIGHLists/Others/splunk/splunk_vuln_check.py168except Exception:CODE
HIGHLists/VSCODE Extensions/build_vscode_extensions_feed.py116except ValueError:CODE
HIGHLists/TOR/build_tor_history.py77except ValueError:CODE
Hyper-Verbose Identifiers12 hits · 12 pts
SeverityFileLineSnippetContext
LOWLists/Domains/DNSDB/TOP1M_DNSDB.py103async def run_massdns_with_live_output(input_file, resolvers_file, total_queries):STRING
LOWLists/Drivers/get_microsoft_vulnerable_drivers_list.py89def flatten_single_root_folder(destination: Path) -> None:CODE
LOW…st/Microsoft/Get_Microsoft_IP_Ranges_From_Microsoft.py42def extract_service_tags_to_folders(json_file, output_dir):CODE
LOW…st/Microsoft/Get_Microsoft_IP_Ranges_From_Microsoft.py77def json_to_custom_csv_service_tags(json_file, csv_file):CODE
LOW…st/Microsoft/Get_Microsoft_IP_Ranges_From_Microsoft.py93def json_to_custom_csv_office_worldwide(json_file, csv_file):CODE
LOWLists/VPN/NordVPN/get_nordvpn_ips_list.py50def fetch_ips_from_github_csv(github_url):CODE
LOW⚡Lists/Others/splunk/splunk_vuln_check.py149def extract_advisory_urls_from_homepage(timeout):CODE
LOW⚡Lists/Others/splunk/splunk_vuln_check.py159def extract_advisory_urls_from_rss(timeout):CODE
LOWLists/Others/splunk/splunk_vuln_check.py274def get_product_status_section(lines):CODE
LOWLists/Others/splunk/splunk_vuln_check.py412def parse_product_status_line(line):CODE
LOWLists/Others/splunk/splunk_vuln_check.py456def parse_product_status_rows(lines):CODE
LOWLists/VSCODE Extensions/build_vscode_extensions_feed.py121def severity_and_category_for_reason(reason: str) -> tuple[str, str]:CODE
Unused Imports9 hits · 9 pts
SeverityFileLineSnippetContext
LOWLists/Domains/TOP1M/download_and_merge_TOP1M.py3CODE
LOWLists/Drivers/get_microsoft_vulnerable_drivers_list.py4CODE
LOWLists/PROXY/sunny9577_proxy-scraper/fetch_proxies.py1CODE
LOWLists/PROXY/proxyscrape.com/fetch_proxy_list.py1CODE
LOWLists/PROXY/TheSpeedX_Proxy/create_lookup_file.py3CODE
LOW…ist/Cloud Hosting Providers/AWS/update_aws_ip_range.py5CODE
LOWLists/VPN/NordVPN/get_nordvpn_ips_list.py3CODE
LOWLists/VSCODE Extensions/build_vscode_extensions_feed.py21CODE
LOWLists/VSCODE Extensions/build_vscode_extensions_feed.py32CODE
Redundant / Tautological Comments2 hits · 3 pts
SeverityFileLineSnippetContext
LOW_utils/create_bookmarks_file_to_import.py46 # Check if line is a headerCOMMENT
LOWLists/Phishing/DNSTWIST/get_dnstwist.py85 # Check if the argument is a file or a list of domainsCOMMENT
Over-Commented Block2 hits · 2 pts
SeverityFileLineSnippetContext
LOWLists/VPN/NordVPN/get_nordvpn_ips_list.py1import requestsCOMMENT
LOWLists/VPN/NordVPN/get_nordvpn_ips_list.py21# for ovpn_url in ovpn_urls:COMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWLists/VSCODE Extensions/build_vscode_extensions_feed.py104CODE